Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7ihBgQWgdqF-5tVt8IAh0RiX0Es.roa
File: 7ihBgQWgdqF-5tVt8IAh0RiX0Es.roa (raw, json)
Hash identifier: D6ZlCnnmOW2kbXxt8fybWCktuY4a3Jp3IjMIee6d3rs=
Subject key identifier: EE:28:41:81:05:A0:76:A1:7E:E6:D5:6D:F0:80:21:D1:18:97:D0:4B
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7ihBgQWgdqF-5tVt8IAh0RiX0Es.roa
Signing time: Thu 15 Sep 2022 02:38:59 +0000
ROA not before: Thu 15 Sep 2022 02:38:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:38:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EE28418105A076A17EE6D56DF08021D11897D04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:6a:1c:87:74:07:60:6f:df:c1:1d:10:86:
88:27:19:8a:e6:c6:3d:e3:85:7e:0e:0b:aa:8c:87:
39:4e:39:3c:c3:81:61:0a:50:55:11:fc:77:55:dc:
c1:24:db:69:10:0e:be:67:2b:0e:21:58:13:d1:b7:
6c:d9:6f:b2:f0:32:79:d1:92:d9:fd:b1:54:6e:be:
66:5f:58:86:66:95:cb:bf:73:19:1a:00:db:00:80:
30:90:93:89:e4:34:65:97:24:dc:c0:c5:c2:66:12:
bf:69:79:bf:8e:af:14:8b:9b:9f:6d:31:dc:a9:da:
72:cd:a6:9f:d0:df:e7:75:2b:fa:91:4b:6e:d0:8e:
34:12:4f:36:0a:1c:fc:56:1b:b6:24:59:68:ab:2b:
98:c8:68:a6:c3:b5:53:f5:67:73:dc:57:83:de:a1:
38:8b:d0:b0:ac:5d:ec:fe:e6:16:8a:ed:cd:ca:ae:
5b:78:65:d5:f5:77:e0:00:93:6f:3b:69:2a:0d:8e:
da:1e:10:ce:7b:1a:cc:49:f9:c8:d8:5c:2f:e9:8f:
45:d0:96:29:f0:7c:dd:74:c1:ce:9f:d2:d5:c0:8f:
e5:a2:23:2a:93:58:b2:58:80:f8:c5:9f:02:af:e6:
ec:09:8b:2b:96:dc:af:fd:03:24:4a:90:46:61:a3:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:28:41:81:05:A0:76:A1:7E:E6:D5:6D:F0:80:21:D1:18:97:D0:4B
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7ihBgQWgdqF-5tVt8IAh0RiX0Es.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.48.0/22
Signature Algorithm: sha256WithRSAEncryption
75:9a:89:b4:a0:bd:e7:53:78:bc:f6:eb:53:4a:6c:3f:2d:31:
0f:42:b6:6b:40:05:eb:24:0e:a3:7e:2f:1f:e3:19:03:8e:c3:
fa:6c:13:e4:45:21:61:cc:bc:25:23:3b:43:bf:27:86:c9:2c:
71:b4:40:76:5d:b9:9d:78:79:62:57:4b:f9:8d:04:7f:fd:69:
7f:4f:ad:7b:18:79:36:a2:83:04:a1:dd:da:83:32:8d:15:16:
76:09:21:ee:50:66:93:2b:9b:3e:39:45:b7:dd:e8:bc:e2:fd:
38:2d:ad:f1:5a:ac:d5:e6:ea:4b:3c:b8:db:e1:dd:52:4b:0a:
d1:80:ed:11:ea:33:86:fd:5b:32:26:3a:5b:07:0b:66:65:ee:
d6:f7:5f:e9:14:8d:5e:85:ed:11:dc:f0:cd:f6:3e:9b:e2:c4:
82:4b:b5:72:00:72:b0:d6:06:66:96:c9:cd:e1:5e:d0:65:17:
4a:4a:7c:5c:61:d8:35:cd:6a:0c:eb:b2:98:04:2a:1c:0a:ec:
89:0e:3a:b0:77:60:2d:f4:b1:c8:e3:3e:e8:f0:20:b9:52:da:
d2:a9:a1:cd:ed:8d:2c:92:8a:98:8a:3f:2f:db:ff:67:ff:13:
bc:8f:d1:7f:cb:3a:3c:0e:d0:b7:cb:14:26:a5:6b:19:0b:38:
65:f7:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org